
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json)
Hash identifier: ZhI9HBSw+tkkEq+f3V0SbBmORthgbY05nVumIKpy61I=
Subject key identifier: A8:A6:FE:E9:31:1D:96:A3:F1:34:6B:FD:A4:BA:2B:1C:FF:83:C9:06
Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Certificate serial: 04F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
Manifest number: 04EA
Signing time: Sat 04 Apr 2026 23:32:02 +0000
Manifest this update: Sat 04 Apr 2026 23:32:01 +0000
Manifest next update: Sat 11 Apr 2026 23:32:01 +0000
Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: F1SmQzUO4Eq85pkyGAitOe+aBlvf818+tZsrxQu0ZyM=)
2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: wBrg9EM4NwDkdFMcEqz/Qv1QuFLGEbWiLtavdDRu3+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Validity
Not Before: Apr 4 23:32:01 2026 GMT
Not After : Apr 11 23:32:01 2026 GMT
Subject: CN=69d19f71-c966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:72:b1:d7:ca:ca:24:e4:cc:d7:6d:20:0f:
43:68:4c:82:46:b4:b8:be:b1:0a:a6:bb:45:04:04:
33:fd:fa:cb:a6:5d:3c:65:ea:7a:5b:aa:21:74:f0:
a2:5a:e3:3a:67:84:7a:c8:19:03:cd:b1:e7:56:6f:
12:d9:d2:4e:9f:57:aa:0e:5c:78:19:d4:14:c1:e3:
64:fa:29:f1:3e:c4:fb:54:a7:aa:05:13:dc:cc:d7:
05:82:26:93:5d:d3:01:16:41:f0:e2:d0:11:77:a3:
80:56:90:32:f3:fd:f0:b7:8d:6d:56:5e:60:60:1b:
81:ab:b9:af:c8:51:da:6c:e0:41:86:4a:ba:ad:d8:
68:7a:1e:a4:53:54:ff:2b:6c:ac:6e:5f:ee:61:c0:
b7:c6:f3:7b:00:ee:b1:8a:c8:6d:a6:4b:02:85:6b:
4e:8a:a4:a2:b5:eb:57:55:9d:2e:e9:30:28:ee:f5:
8d:ff:d9:78:e8:8e:fe:88:d9:77:f4:7f:0b:d6:4f:
a1:63:37:5e:ca:d5:b1:ed:62:c6:f1:90:93:19:46:
76:16:3b:78:2b:12:36:41:50:93:11:e9:43:f5:82:
c8:17:91:22:f6:52:c3:89:f2:81:d7:f4:9a:ef:e2:
e4:8f:64:9f:e1:cd:6e:3b:ca:82:cd:4e:0f:5d:90:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:FE:E9:31:1D:96:A3:F1:34:6B:FD:A4:BA:2B:1C:FF:83:C9:06
X509v3 Authority Key Identifier:
keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:d2:1d:8b:ed:41:f0:07:b4:6d:8f:e3:8f:27:8e:a6:d6:a9:
43:66:d9:26:23:a9:a3:46:e3:09:45:56:83:5f:60:19:1c:e2:
a5:5e:42:27:d8:2f:d6:56:88:c6:1f:c0:71:08:53:96:41:a0:
c3:ec:ec:5d:36:d4:36:0c:74:9e:e6:18:1f:ea:69:a5:a7:2d:
a6:e9:f7:d0:cb:93:31:1e:dd:f1:71:0e:57:85:39:bb:d7:d6:
a0:4a:09:88:2f:b3:1e:cb:81:2c:a8:89:79:4a:04:17:81:ed:
08:e4:69:1b:ab:81:6f:e4:22:4d:b6:3b:ba:2c:50:dd:0e:fe:
9b:0e:88:20:8e:47:fa:c4:75:97:93:90:d4:cc:83:67:23:f7:
10:b9:bd:f8:85:a8:17:af:c7:2d:22:37:e4:c0:c0:1d:8e:11:
bf:26:06:b6:ad:ce:32:7b:2a:13:63:37:8a:9f:14:eb:29:e9:
bd:dc:61:b8:66:d0:75:8c:69:ce:5f:d6:86:75:2d:6f:ab:9e:
31:37:41:78:78:7e:b3:18:ff:f0:84:bb:a6:de:83:6e:00:12:
e4:86:d3:07:a8:15:f9:d6:b0:38:dc:52:e7:b4:9d:f3:ad:87:
76:70:66:1f:c2:39:4e:5c:91:0a:d0:b6:69:18:4f:7e:08:dc:
8c:2f:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:20:02 2026 by rpki-client